Application Registration types for aad approleassignment command

[pschaeflein]

While working on migrating the approleassignment commands to use Microsoft Graph, I need to update the sample payloads in the *.spec.ts files. There are four applications:

• daemon
• web app
• service (web api)
• native client

Does this match the understanding of what the command should handle?

The service principal for Microsoft Graph is included as well, but with only User.Read.All. Was this a special app registration or just the default with the app roles trimmed to only what was needed to test?

@garrytrinder - do you still have those applications in a tenant? If so, can you grab the output from Microsoft Graph?

Also, I'm thinking that we add a script file with AZ CLI commands to create these applications, so that further development does not need to rely on a specific tenant. If you happen to have those, would be great.

[garrytrinder]

Does this match the understanding of what the command should handle?

Yes, that does look like a comprehensive list.

The service principal for Microsoft Graph is included as well, but with only User.Read.All. Was this a special app registration or just the default with the app roles trimmed to only what was needed to test?

I'm not aware of any specific reason behind this unfortunately.

Also, I'm thinking that we add a script file with AZ CLI commands to create these applications, so that further development does not need to rely on a specific tenant. If you happen to have those, would be great.

Good idea, we have already started work on scripting the creation of custom Azure AD identities to make it easier for folks to implement their own identity quickly and easily without having to follow the steps in the UI portal.